Commit graph

90 commits

Author SHA1 Message Date
gyuu04
a4b14ab20f Update init.py 2025-07-21 20:30:27 +09:00
gyuu04
8e0523e734 open redirect 2025-07-18 13:35:43 +09:00
gyuu04
7d378fa91f Update open_redirect_check.py 2025-07-17 13:59:05 +09:00
gyuu04
905db47d8a Merge remote-tracking branch 'origin/main' into gyu 2025-07-17 12:34:10 +09:00
gyuu04
182ea21178 open redirect 탐지 2025-07-17 12:11:03 +09:00
61e4ed6119
Merge pull request #26 from j93es/feat/at-hhotfix
[REFACTOR]: Access Token 탐지 조건 완화
2025-07-16 21:06:38 +09:00
KMINGON
8ef13de441 [REFACTOR]: Access TOken 탐지 조건 완화 2025-07-16 21:03:35 +09:00
gyuu04
9898f215f3 open redirect 2025-07-13 14:28:11 +09:00
James
a3b54028b7
Merge pull request #25 from j93es/0712 2025-07-12 16:46:13 +09:00
tv0924@icloud.com
e2ee91034d [Update] client secret | google response type token | google login hint 2025-07-12 12:08:03 +09:00
김민곤
1a97b9d403
Merge pull request #23 from j93es/fix/access-token
Access-Token 동작 오류 Hotfix
2025-07-05 15:27:54 +09:00
KMINGON
cf5746685a [FIX]: implicit type 체크 함수 인자 오류로 동작 안하던 것 수정 2025-07-04 21:31:15 +09:00
c8815f3f28
Merge pull request #22 from j93es/0702-1
[Update] 검증 진행 로직 변경 및 csrf 로직 변경
2025-07-02 23:10:01 +09:00
tv0924@icloud.com
a1758a60d4 [Update] 검증 진행 로직 변경 및 csrf 로직 변경 2025-07-02 11:40:29 +09:00
James
4758d7a689
Merge pull request #21 from j93es/feat/ignore
일부 트래커와 cdn, 여러 파일 확장자를 제외했습니다.
2025-07-01 21:42:24 +09:00
87d5b0209c [Enhance] 정적 파일 확장자 목록에 '.md' 및 '.txt' 추가 2025-06-30 22:03:25 +09:00
5edab9244c 일부 트래커와 cdn, 여러 파일 확장자를 제외했습니다.
뭔가 Type이 이슈가 있는거 같은데 아무래도 내 IDE 설정이 빡세서 그런거 같긴 하네요.
2025-06-30 21:44:08 +09:00
김민곤
949b156f19
Merge pull request #20 from j93es/refactor/access-token
[REFACTOR]: 요청 별 검증 함수를 분리하여 오탐률 개선
2025-06-29 21:03:30 +09:00
KMINGON
c20bcdebf3 [REFACTOR]: 요청 별 검증 함수를 분리하여 오탐률 줄임 2025-06-29 17:14:43 +09:00
James
6e5c37423c
Merge pull request #19 from j93es/date/0626-2 2025-06-26 19:47:03 +09:00
tv0924@icloud.com
0d81fdd49f [Refactor and Enhance] addon init.py의 비동기 작업을 더욱 효율적으로 수행 2025-06-26 19:07:35 +09:00
James
00c81f365a
Merge pull request #18 from j93es/date/0626-1
자동 오탐 검증을 위한 라우터 추가
2025-06-26 18:39:41 +09:00
tv0924@icloud.com
58d5deb435 [Update] 라우터 반환 형태 2025-06-26 15:45:39 +09:00
tv0924@icloud.com
05a095df7d [Docs] api docs 2025-06-26 15:35:26 +09:00
tv0924@icloud.com
4deb032708 [Docs] api docs 2025-06-26 15:35:12 +09:00
tv0924@icloud.com
3c5db3c1fd [Update] 자동 오탐 검증을 위한 라우터 추가 2025-06-26 15:20:30 +09:00
tv0924@icloud.com
53db0fb14e [Fix] scope detection 2025-06-26 12:40:14 +09:00
tv0924@icloud.com
3a1422a2f2 [Update] save vuln report logic 2025-06-26 12:20:41 +09:00
tv0924@icloud.com
062552d3d8 [Refactor] 리팩터링 2025-06-26 10:43:52 +09:00
gyuu04
afcfd7de87
Merge pull request #17 from j93es/gyu
OAuth redirect_uri 우회 패턴 17개 추가 및 테스트 완료
2025-06-25 14:17:24 +09:00
gyuu04
1c6fc53a81 redirect_uri 우회 패턴 추가
- 57개 우회 패턴 구체화
- 적응형 레이트 리미팅 추가 (차단 방지)
2025-06-25 14:14:19 +09:00
gyuu04
6dceba0c24 OAuth redirect_uri 우회 패턴 17개 추가 및 테스트 완료
- 안전한 테스트 도메인 적용 (evil.example)
2025-06-24 16:23:05 +09:00
James
0bee707406
Merge pull request #16 from j93es/chore/env
chroe: Set the environment variable
2025-06-21 15:24:58 +09:00
69622e4648 chroe: Set the environment variable 2025-06-21 14:34:54 +09:00
e063dadb72
Merge pull request #15 from j93es/hotfix/google-login-hint
Docs, Google Login Hint Hotfix
2025-06-20 22:03:09 +09:00
897173ba46 docs: README.md에 인증서 설정 방법 추가
refactor: GoogleLoginHint.py에서 불필요한 import 제거 및 URL 수정 로직 개선
2025-06-18 21:41:44 +09:00
c511b3bfd7 README.md 2025-06-18 21:09:02 +09:00
9071ed11b7
Merge pull request #14 from j93es/feat/google-login-hint
Feat/google login hint
2025-06-16 22:46:26 +09:00
5d1624a96a
Update ci.yml 2025-06-16 22:27:11 +09:00
ba277ccec1
Update ci.yml 2025-06-16 22:25:54 +09:00
imnyang
3af5787064 feat: update CI workflow configuration
Update GitHub Actions workflow settings
2025-06-15 13:39:16 +09:00
imnyang
0c7994a52f fix: update proxy test to skip certificate verification 2025-06-15 13:31:31 +09:00
imnyang
9a14872964 fix: update proxy test to use certificate for SSL verification 2025-06-15 13:30:33 +09:00
imnyang
b221c4a9e6 fix: update proxy test to skip SSL verification in CI workflow 2025-06-15 13:29:46 +09:00
imnyang
990eb1b643 fix: update proxy test URL to use localhost for curl command 2025-06-15 13:28:43 +09:00
imnyang
c593a92b11 fix: wrap URL in quotes for curl command in CI workflow 2025-06-15 13:27:06 +09:00
imnyang
cf3bfee039 fix: update proxy test URL to use correct GitHub OAuth endpoint 2025-06-15 13:25:43 +09:00
imnyang
32efcbe1a0 Merge branch 'feat/google-login-hint' of https://github.com/j93es/oauth-backend into feat/google-login-hint 2025-06-15 13:24:07 +09:00
imnyang
3850b0de2f fix: change GoogleLoginHintAddon request method to async 2025-06-15 13:23:58 +09:00
imnyang
00e3958300 fix: remove unused import of json.load in init.py 2025-06-15 13:15:11 +09:00